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Abstract. We exhibit the isogeny classes of supersingular abelian threefolds 
over F2" containing the Jacobian of a genus 3 curve. In particular, we prove 
that for even n > 6 there always exist a maximal and a minimal curve over 
F2™ . All the curves can be obtained explicitly. 



Introduction 

Let g > be an integer and k = ¥ q a finite field with q = p n . When C spans the 
finite set of (smooth, absolutely irreducible, projective) curves of genus g over ¥ q 
what is its maximal number of points ? This question has an easy answer in the case 
g = and 1 but one has to wait till 1985 for Serre to solve the case g = 2 |Ser85| . 
For g > 3, the problem has only partial solutions, most of the time obtained case 
by case for small q |vdG06j . This problem can be seen as part of a more general 
question : let A be an isogeny class of abelian varieties of dimension g > 1 over 
k. Does A contain the Jacobian of a curve of genus g over k ? Again, the answer 
to this question, easy in the case g = 1, has been obtained only recently for g = 2 
HNR06 . For g > 4, the problem seems more difficult even in the geometric setting 
(i.e. over k) since one has to characterize Jacobians among abelian varieties. 
So, let us concentrate on the new frontier, the case g = 3. As for g = 2, if (A, A) 
is an undecomposable principally polarized abelian threefold defined over k then 
there exists a curve C defined over k such that Jac(C) is isomorphic to (A, A) over k 
|OU73| . However, over k the situation is more subtle than it was for g = 2 jLauOll 
Appendix] : 

• if C is hyperelliptic then Jac(C) ~ A. 

• if C is non-hyperelliptic then Jac(C) is either isomorphic to A or to the 
quadratic twist of A. 

Thus, if A belongs to the isogeny class with Frobenius polynomial x e + ax 5 + bx A + 
cx 3 +qbx 2 +aq 2 x+q 3 , which we denote -4( a ,b,c), then Jac(C) may belong to this class 
or to the class Af- a ^,- c )- I n particular #C(fc) = l + q±a. So far, nobody knows a 
practical method to determine which case occurs. In account of this uncertainty on 
the sign, the current best general result is due to Lauter |Lau02j : let m — [2^/q\ 
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then there exists a curve C/k of genus 3 such that 

#C*(fc) > q+ 1 + 3m- 3 or #C(fc) < q + 1 - 3m + 3. 

If we restrict to the case n even, Ibukiyama Ibu93 showed that if p = 3 (mod 4) or 
(n = 2 (mod 4) and p ^ 2) then there exists a maximal curve over k (recall that a 
curve is maximal (resp. minimal) if #C(k) = q+l+gm (resp. #C(fc) = gm)). 
In this article we consider the case p = 2 and we answer the following question: 
which are the isogeny classes of supersingular abelian thrcefolds over k = F 2 ™ 
containing the Jacobian of a curve ? Theorems 14.21 1431 14 . 41 give a complete answer, 
which is easy to state for n > 6: 

Result. All isogeny classes of supersingular abelian threefolds over k with Frobe- 
nius polynomial F contain the Jacobian of a genus 3 curve except in the following 
cases (where e = ±1 takes both values): 

• n even and F(x) = f(x)(x 4 + ey/qx 3 + qx 2 + eqy/qx+q 2 ) with f the Frobenius 
polynomial of a supersingular elliptic curve over k ; 

• n odd and F is equal to (x 2 + q){x A + ey/2qx 3 + qx 2 + tq\[2qx + q 2 ) or 
(x 2 + e^/2q~x + q)(x 4 + e^x 3 + qx 2 + eq^/2qx + q 2 ). 

In particular, the above mentioned ambiguity of sign disappears when we con- 
sider supersingular abelian threefolds up to isogeny and when the base field is big 
enough (n > 6). In this case, the isogeny class -4( a ,b, c ) contains a Jacobian if and 
only if the isogeny class -4(- ,fc.-e) does. One may speculate if a similar phenomenon 
will occur for non-supersingular threefolds and/or other characteristics. 

As another by-product, we obtain the following result. 

Corollary. For n > 6 even, there are maximal curves and minimal curves of 
genus three over k. For n = 6 there are maximal curves over k, but no minimal 
curve. For n — 2 or A there are neither maximal nor minimal curves over k. 

Let us point out that it is easy to use the constructive methods of the proofs to 
build explicit models for these curves. Indeed, our approach is based on models for 
supersingular quartics C over k (genus 3 non-hyperelliptic curves whose Jacobians 
are supersingular) }NR06| : 

C: Y 4 + fY 2 + gY = X 3 + dX 2 + e, g € k* , d, e, / G k. 

The automorphism group of C/k contains G — Z/2Z x Z/2Z, and the quotients of 
C by the three non trivial automorphisms of G define three explicit elliptic curves 
Ei/k such that Jac(C) ^ E\ x £ 2 x £ 3 . We reverse then the process and starting 
with a product E\ x E% x £^3 of supersingular elliptic curves over k (or a quadratic 
or cubic extension of k), we determine if it is isogenous to the Jacobian of a curve 
of C of this type with coefficients in k. 

This paper is organized in the following way : in Sec. 1, we present elementary 
results on supersingular elliptic curves over k, expressing their trace in terms of the 
coefficients of normalized models. In Sec. 2 we give parametrizations of some genus 
curves and study the number of points of certain hyperelliptic curves of genus 
4 as well as of an affine surface. These results are useful in Sec. 3, which is the 
core of the paper. In Sec. 3 we determine existence of supersingular quartics with 
elliptic quotients in prescribed isogeny classes. This section is divided into three 
parts according to the splitting behavior of Y 3 + fY + g. Finally, Sec. 4 answers 
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our initial question by comparing the results obtained in Sec. 3 and the isogeny 
classes of supersingular abelian thrcefolds over k. 

1. Supersingular elliptic curves in characteristic 2. 

Let k = ¥ q be a finite field of characteristic 2, with q = 2". We shall denote 
simply by Tr or Tr^ the absolute trace Tr fc / F2 . 

The perfect duality of k given by the nondegenerate pairing 

( , ):kxk^W 2 , (x,y)=Tr{xy), 

leads to a canonical isomorphism of F2-vector spaces 

( )* : k — ► Honif 2 {k, F 2 ), x 1— ► x* = Tr(x— ). 

Moreover, if q is a square we have an analogous result substituting F 2 by F4. We 
shall often use the following immediate consequence of this duality 

Lemma 1.1. Let k — F 2 or k = F 4 (if q is a square). If m, . . . , u r G k are 

ko-linearly independent, then we have an onto map: 

k — ► (ko) r , x 1— > (x*(u\), . . . , x*(u r )). 
We recall some basic facts concerning the Artin-Schreier operators: 

AS(ar) - x + x 2 , KS 2 {x)^x + x i . 
There is an exact sequence of additive abelian groups 

— ► F 2 -U k ^ k ^ F 2 — ► 0, 
and a similar exact sequence of F4-vector spaces, when F4 C k 




Lemma 1.2. A quadratic polynomial f{x) = x 2 + ax + b e k[x] is separable if and 
only if a ^ 0; in this case, f(x) is irreducible if and only ifb/a 2 £ AS(fc). 

Artin-Schreier models. An elliptic curve over k is supersingular if and only if 
its j invariant equals 0. Thus, the supersingular elliptic curves are all geometrically 
isomorphic and they have Weierstrass models: 

y 2 + a 3 y = x 3, + a 2 x 2 + a 4 x + a e , a 3 ^ 0. 

The map (x,y) <— > (x, a 3 1 y) sets a /c-isomorphism with an Artin-Schreier model 

y 2 + y = a^ 2 x 3 + a^ 2 a 2 x 2 + a^ 2 a i x + a 3 2 aQ. 

A change of variables y = y + a^a^x + t, t G k, makes the coefficient of x vanish 
and allows us to suppose that the last term is cither or a fixed element cq in 
k \ AS(fc). We are led in this way to normal Artin-Schreier models of the type 

E: y 2 +y = ax 3 + bx 2 + c, a G k* , b G k, c G {0, c }. 

The advantage of the Artin-Schreier models is that the canonical twist (associ- 
ated to the automorphism "multiplication by —1") is obtained just by making a 
different choice of the coefficient c. 

E': y 2 + y = ax 3 + bx 2 +c + c . 
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Ei 




E a , E a 2 


E 'a, E' a2 


E 


t 


-(-l)"/ 2 2^ 


(-i)«/ 2 2Vg 


("1)" /2 V9 


-(-1)" /2 V9 






Table 1. Supersingular elliptic curves, q square, a £ k* \ (k*) 3 



E 




H 


H' 


t 





(_l)(» 2 -l)/8^ 


_(_l)(» 2 -l)/8^ 



Table 2. Supersingular elliptic curves, q non-square 



If x 2 + tx + q is the Frobenius polynomial of E/k then x 2 — tx + q is the Frobenius 
polynomial of E' jk. 

Let us introduce a special notation for some particular curves 

E a : y 2 + y = ax 3 , a £ k* , 

H: y 2 + y = x 3 + x 2 , 

E : y 2 + y = c„ 3 x 3 +x 2 , c £k\AS{k). 

Theorem 1.3. There are seven or three k-isomorphism classes of supersingular 
elliptic curves according to q being a square or not. In Tables 1 and 2 we find 
representative models of these classes, and their respective Frobenius polynomials 
x 2 + tx + q. 

This can be checked by computing all k/k twists of the curve E\ : y 2 + y = x 3 . 
If a twist E corresponds to an automorphism a e Aut(£d) and /: E\ — ► E is a 
geometric isomorphism with a = f^ 1 f l7 1 then the pullback by / of the Frobenius 
endomorphism of E is an, where ir is the Frobenius endomorphism of E\. Since 
7T 2 = (— l) n q, this determines immediately the Frobenius polynomial of E in terms 
of the characteristic polynomial of a as an element of End(-B). 

Proposition 1.4. Let E be a supersingular elliptic curve over k given by an Artin- 
Schreier normal model 

E: y 2 + y = ax 3 + bx 2 + c, a £ k* , b £ k, c £ {0, c }. 

Tables 3 and 4 below determine the isomorphism class of E in terms of the 
parameters a, b and c. 

Proof. A fc-isomorphism from E to another normal model E with parameters a, b, c 
is necessarily of the form: 

(x, y) i ► (u(x + v),y + av 2 x + t), 

with u £ k* , v, t £ k satisfying 

a = u~ 3 a, b = u~ 2 (b + a 2 v i + av), c = c + a 2 v 6 + bv 2 + t + t 2 . 

In particular, the class of a £ k*/(k*) 3 is preserved. 

We can get a target curve with b = if and only if a 2 v i + av = b for some 
v £ k. Note that in this case bv 2 — a 2 v 6 + av 3 belongs to AS(fc) and c = c + 
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a, b 


E isomorphic to 


a g (k*) 3 or 
a = u 3 , bu- 2 E AS 2 (fc) 


E a , if Tr(c + v 3 a) = 
££, if Tr(c + t; 3 a) = 1 


a = u 3 , bu' 2 $ AS 2 (fc) 


£ 



Table 3. Isomorphism class of E: y 2 + y = ax 3 + bx 2 + c, 
q square, v is any solution in k to va + v 4 a 2 = b 



a, b 


E isomorphic to 


a = u 3 , bu~ 2 S AS(fc) 


E 1 


a = u 3 , bu- 2 AS(fc) 


H, if Tr(c + v 3 + v) = 
H', if Tr(c + i; 3 + v) = 1 



Table 4. Isomorphism class of E: y 2 + y = ax 3 + bx 2 + c, 
q non-square, v is any solution in k to 1 + v + v A = bu- 2 



av 3 (mod AS(fc)). If a £ (k*) 3 the F2-linear map x i— > a 2 a; 4 +aa; is an automorphism 
of k and the equation a 2 v A + av = b has a unique solution v E k. If a = z 3 for 
some z £ k, this equation is equivalent to u> 4 + w = bz- 2 for w = zv, and it has a 
solution in k if and only if bz~ 2 g AS 2 (fc). 

We can get a target curve with a = b = 1 if and only if a = u 3 and a 2 i> + aw = 
+ u 2 for some w £ fc, or equivalcntly (for w = md): w 4 + w = fru~ 2 + 1. In this 
case av 3 = w 3 and bv 2 = a 2 v 6 + av 3 + u> 2 , so that c = c + w 3 + w (mod AS(fc)). 

After these considerations, the proposition is consequence of Theorem II .31 □ 

2. Some special curves and surfaces 

Lemma 2.1. a) The affine plane curve 

a + bx + c 4 x 4 = a' + b'y + (c') 4 y 4 , b'c ^ be', 

has genus zero and it admits the parametrization: 

_c'(a + a' + /i 4 )+6'/i _ c(a + a' + (j, 4 ) + b/j, 

X ~ b'c + be' ' V ~ b'c + be' 
in terms of a free parameter \i. 

b) For r, s, t G k* such that r + s + 1 = 0, the affine spatial curve 

x + x 4 r s = y + y 4 s 8 = z + z 4 t 8 

has genus zero and it admits the parametrization: 

x = (rst)- 2 (rstX + (r- 2 t 4 + rs)\ 4 + r~ 2 A 16 ) , 
(1) y = (rst)- 2 (rstX + (s- 2 r 4 + st)X 4 + S - 2 X 16 ) , 

z = (rst)- 2 (rstX + (^ 2 s 4 + tr)X 4 + i^A 16 ) , 
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in terms of a free parameter X. In particular, for any point (x, y, z) of this curve 

x 3 r S + y 3 s 8 + z 3 t S = (rs i)-4 A 36 + ^ st y^ X 18 + 

+ {rst)- 4 {r 7 s + s 7 t + t 7 r)X 12 + (rst^X 9 . 
c) For r,s,t € k* such that r~ 3 + s~ 3 + tr 3 = 0, the affine spatial curve 
r 16 (l + x + x 4 ) = s 16 (l + y + y 4 ) = t 16 (l + z + z 4 ) 
has genus zero and it admits the parametrization: 

x = r- 4 [(r- 1 + s- 1 + t- l f{r 12 + s 12 + t 12 + (stf) + 

+r- 9 (st) 3 X + (r- 18 S - 6 + t- 24 )X 4 + (rst)" 36 A 16 ] , 

y = s- 4 [(r- 1 + s- 1 + t- 4 f(r 12 + s 12 + t 12 + (trf) + 

+s- 9 (tr) 3 X + (s- ls t- 6 +r- 24 )X 4 + (rst)- 36 X 16 ] , 

z = tr 4 [(r- 1 + s- 1 + t- r ) 8 {r 12 + s 12 + t 12 + (rsf) + 

+t- 9 (rs) 3 X + (t- 18 r- 6 + s" 24 )A 4 + (rst)- 36 X 16 ] , 

in terms of a free parameter X. In particular, for any point (x, y, z) of this curve 

x 3 + x + y 3 + y + z 3 + z = iT 84 A 36 + iT 72 S 8 A 32 + iT 42 A 18 + iT 36 S 4 A 16 + 
+ R- 12 TX 12 + R- 21 X 9 + S 8 TX 8 + R 12 S 64 X 4 + R 24 S 72 , 

where R = rst, S = r" 1 + s" 1 + tr 1 , and T = r^s" 42 + s" 6 *" 42 + t^r" 42 . 

Proof. The only singularity of the curve a + bx + c 4 x 4 = a' + b'y + {c') 4 y 4 is a 
triple point at infinity. Thus, it can be parametrized in terms of the pencil of lines 
through this singular point. This explains the first item. 

In particular, we can express the solutions of x + x 4 r 8 = y + y 4 s 8 , and indepen- 
dently x + x 4 r 8 = z + z 4 t 8 , in terms of free parameters 

x = t- 2 ( f i + n 4 s 2 ), y = t- 2 {pL + ii 4 r 2 ), 
x = s- 2 (v + v 4 t 2 ), z = s- 2 {v + v 4 r 2 ). 

The solutions of x + x 4 r 8 = y + y 4 s 8 = z + z 4 t 8 correspond to t~ 2 (p + p 4 s 2 ) = x = 
s~ 2 (v + v 4 t 2 ). By the first item we can express p,, v in terms of a free parameter p 

_ s^jsty^p + tp 4 _ t^jsty^p + sp 4 

M ~ s-^+t-i ' V ~ s^+t- 1 ■ 

The change of parameters A = (si) 1 / 2 /} leads to the desired expression of x, y, z in 
terms of A. The computation of x 3 r 8 + y 3 s 8 + z 3 t 8 in terms of A is straightforward. 

In a similar way, we can express the solutions of r 16 (l + a; + a; 4 ) = s 16 (l + y + y 4 ), 
and independently r 16 (l + x + x 4 ) = t 16 (l + z + z 4 ), in terms of free parameters 

_ 4 r 16 + s 16 + s 12 p + p 4 _ _ 4 r 16 + s 16 + r 12 p + p 4 

X — r r i2 _|_ s 12 ' y ~ S r 12 _|_ s 12 ' 

_ 4 r 16 +t 16 +i 12 ^ + ;/ 4 _ _ 4 r 16 +i 16 + r 12 i/ + ^ 4 

X - T r 12 +t 12 , Z-t r 12 + il2 
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The solutions of r 16 (l + x + x 4 ) = s 16 (l + y + y 4 ) = < 16 (1 + z + z 4 ) correspond to 
values of /i, v such that the two above expressions for x coincide. Using the identity 
(rs) 3 + (rt) 3 + (st) 3 — this is equivalent to 

(ri) 12 (r 4 + s 4 ) + (rt) 12 /i + (r 12 + t 12 ) M 4 = 

= (rs) 12 (r 4 + t 4 ) + {rs) l2 v + (r 12 + s 12 )zA 

By the first item we can express y,, v in terms of a free parameter A 

H = t- 6 [(rst) 6 ^- 1 + s- 1 + t- 1 ) 8 + r 3 s 3 t- 3 X + (rst)- 6 X 4 ] , 
v = s- 6 [(rstfir- 1 + s- 1 + t" 1 ) 8 + r 3 t 3 S - 3 X + (rst)- 6 X 4 ] . 



The computation of x, y, z and x 3 + x + y 3 + y + z 3 + z in terms of A is then 
straightforward. □ 

We need to control the number of points of supersingular hyperelliptic curves of 
genus 4 given by equations of the type 

Vabc- y 2 + y = Ax 9 + Bx 3 + Cx, Aek*,B,Cek. 

Lemma 2.2. Consider the F 2 -Zmear endomorphism of k given by the polynomial 
P(x) = A 8 x 64 + B s x 16 + B 4 x 4 + Axe k[x]. Let W = Ker(P) n k, w = dim F2 (W) 
and let Q: W — > F 2 be the linear map given by Q(x) = Tr(Ax 9 + Bx 3 + Cx). 
Then. 



\V AB c(k)\ 




ifQ = Q, 
ifQ^O. 



In particular, if w < n we have 2 < |2^ABc(fc)| < 2q. Moreover, one has w = n 
only in the following cases 

• q = 64, B = 0, A £ F 8; 

• q = 16. B = A 2 , 

• q = 8, B = 0, 

• q = 4, A + B E ¥ 2 , 

• q = 2. 

Finally, if q is a square, C = and w = n we have \T>ABc(k) \ = 2q + 1. 

Proof. The statement about \T>ABc{k)\ is consequence of |vdOvdV92l sees. 3,5]. 
The condition w = n means that the polynomial P(x) vanishes identically on k 
and it is easy to check that this translates into the conditions given in the lemma. 
The last statement is consequence of the fact that the linear form Tr(Ax 9 + Bx 3 ) 
vanishes identically if w = n; for instance, if q = 16: 

Ax 9 + A 2 x 3 = Ax 9 + (A 2 x 3 ) s = Ax 9 + Ax 9 = (mod AS(fc)). 

□ 



Number of triples of cubes adding up to zero. 

Lemma 2.3. The affine surface x 3 +y 3 +z 3 — has (q— 1) (|i?i(fc)| — 3/i) k-rational 
points with nonzero coordinates, where [i — I/13 (fc)| is equal to 3 or 1 according to q 
being a square or not. 
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Proof. The plane projective curve given in homogeneous coordinates by x 3 + y 3 + 
z 3 = is F2-isomorphic to E\ through the map (x, y, z) i— ► (x + y + z,x + z,x + y). 
This Fermat curve has 3/i points satisfying xyz — 0, and each projective solution 
with xyz ^ determines q — 1 affine points of the surface x 3 + y 3 + z 3 — 0. □ 

3. SUPERSINGULAR PLANE QUARTICS WITH PRESCRIBED ELLIPTIC QUOTIENTS 

In |NR06| it is proved that any supersingular plane quartic defined over k admits 
an affine model of the type 

(3) C: Y 4 + fY 2 + gY = X 3 + dX 2 + e, g e k* , d, e, f e k, 

with a single point P^ at infinity, which is a hyperflex. The line at infinity is 
the only bitangent of C. For each nonzero root 9 of the polynomial R{Y) := 
Y A + fY 2 + gY, the quotient of C by the involution Y i— > Y + 9 is an elliptic curve 
E e with Weierstrass model | NR06I Prop. 2.5] 

(4) E e : y 2 + 00 _1 y = x 3 + dx 2 + e. 

Hence, the Jacobian J of C is /c-isogenous to the product E e x E e x E 6 of the 
three supersingular elliptic curves corresponding to the three nonzero roots 0, 9' , 9" 
of the separable polynomial R(Y). 

In this section we determine the possible values of the isogeny classes of these 
triples of elliptic quotients of supersingular plane quartics. In section 0] we shall 
deduce from these results the rational functions that can occur as the zeta function 
of a supersingular plane quartic. 

We shall work from now on with the Artin-Schreier models of E e , E 6 and E e : 

(5) E e : y 2 +y = a e x 3 + b g x 2 + c e , 

with ag — (g~ 1 9) 2 , be = agd, ce = age, and similar notations for E e and E s . 
Note that ag + a$/ + ag>> = 0. We analyze separately the three cases that arise 
according to the structure of the Galois set {ag, agi, ag//}. To this purpose, the 
following definition will be useful. 

Definition 3.1. Let C be a quartic given by an equation According to the 
number 3, 1 or of roots in k* of the polynomial R{Y) = Y A + fY 2 + gY , we say 
that C is respectively split, of quadratic type or of cubic type. 

If C is split then the Jacobian of C is fc-isogenous to the product of three elliptic 
curves, but the converse is not true (cf. section |3J|. 

Throughout this section we shall make constant use of Theorem 11.31 and Propo- 
sition ^31 without further mention. If q is a square we shall denote by E nc (nc for 
"non-cube" ) any supersingular elliptic curve ^-isomorphic to E a for some non-cube 
a G k*. Thus, if q is a square the five k- isogeny classes of supersingular elliptic 
curves are represented by E\ , E[, E nc , E' nc and Eg . 

3.1. Quartics of cubic type. If C is a quartic of cubic type the elliptic curves 
E 6 , E , E e are fc3-isogenous because they are Galois conjugate. 

Definition 3.2. Let E be a supersingular elliptic curve defined over k^. We say 
that E is attained if there exists a plane quartic of cubic type over k whose Jacobian 
is k^-isogenous to E x E x E , or equivalently, such that E is k^-isogenous to E. 

Our aim in this subsection is to prove the following result 
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Theorem 3.3. All supersingular elliptic curves E defined over k% are attained by 
a plane quartic of cubic type over k with only two exceptions: E[ is not attained 
over F4 and H is not attained over ¥2- 

The isogeny class of E 6 is computed in Proposition !! .41 in terms of ag, bg, eg. If 
we let C span all quartics of cubic type the parameters (ag, bg, eg) span all triples 
(a, ad, ae), where a is an arbitrary element in fcg with TY k3 / k (a) = 0, and d, e 
belong to k. We have Tr k3 / k (cg) = eTr fe3 / fc (a) = 0; thus, the coefficient e of the 
quartic does not play any role and we can assume that e — 0. 

From now on, the discussion of Theorem 13.31 takes a different form for q square 
and q non-square. 

Case q square. Let us check first that a can be a cube and a non-cube. 

Lemma 3.4. An element a £ fc| is a cube in k% if and only if N k3 / k (a) is a cube 
in k* . 

Proof. Clearly a = u 3 implies that N k3 / k (a) = N k3 / k (u) 3 is a cube in k*. Con- 
versely, suppose that p := N k3 / k (a) is a cube in k*; then it is necessarily a ninth 
power in fc| because every element in k* is a cube in k%. Since q = 1 (mod 3) we 
have a' — a q — au 3 , and similarly u' = u q = uw 3 , for some u, w £ k^. Hence 

p = aa'a" = a{au 3 ){a' \u') 3 ) = a 3 u 9 w 9 

and a is a cube in £3 because a 3 is a ninth power. □ 

Corollary 3.5. There are cubes and non-cubes a £ k^ with Tr k3 / k (a) = 0. 

Proof. The map k* — ► k given by x <— > x 1 + x~ 1 cannot be onto. For any j € k 
which is not in the image of this map the polynomial a; 3 + jx + 1 is irreducible and 
the roots of this polynomial are cubes in On the other hand, the roots of the 
irreducible polynomials of the type x 3 + j are non-cubes in fcg . □ 

Proposition 3.6. The elliptic curves Eq, E±, E nc are attained. 

Proof. Take any a £ k% with Tr fea / fc (a) = 0. For d = we get E e ^ k , 3 E a and the 
two isogeny classes Ei, E nc are attained, according to a being a cube or not. 

Take now a = u 3 for some u £ k$. If o~\, 02, 0-3 are the elementary symmetric 
functions of the conjugate elements u, u' , u" we have 

(6) = u 3 + {u') 3 + {u") 3 = cr 3 + o-xo-2 + o- 3 . 

Hence, Tr k3 / k (u) = ci ^ 0. By duality relative to the extension k/F^ (cf. Lemma 
11.1(1 . there exists d £ k such that ^ Tr k /f 4 (da\) = Tr k3 /f 4 (du). Hence, bgu~ 2 = 
adu- 2 = du (£ AS 2 (k 3 ) and E e ~ fea E . □ 

In order to show that E[ (respectively E' nc ) is attained we need to find a £ k%, 
d £ k such that Tv k3 / k (a) = 0, a is a cube (respectively a non-cube) in k 3 , and 
there is some v £ k 3 satisfying d = v + v A a and Tr k3 (v 3 a) = 1. This will be shown 
in the following lemma: 

Lemma 3.7. If q > 4 there exist a, v £ fcg such that Tr k3 / k (a) — and 

a) a is a cube (resp. a is a non-cube) in 

b) v + v A a belongs to k and Tr ks (v 3 a) = 1. 

If q — 4 this is still true if a is a non-cube and false if a is a cube. 
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Proof. Take any a £ fcj with Tr k3 / k (a) = 0. Let r, s, t € &3 be determined by 
a = r 8 , a' = s 8 , a" = i 8 . Note that r, s, t are conjugate over k. Take any X £ k 
and let x, ?/, z be the solution of x + x 4 a = y + y 4 a' = z + z 4 a" given in Q of 
Lemma 12. II Clearly, x, y, 2 are conjugate over fc; in particular, the common value 
d := x + x 4 a = y + y 4 a! = z + z 4 a" belongs to k. We get all possible v £ k$ such 
that v + v a € k by taking v = x for all values of A in k. Moreover, by the further 
computation of Lemma 12. II 

Tr fe3 (x 3 a) = Tr k {x 3 a + y 3 a' + z 3 a") = Tv k (AX 9 + BX 3 ), 

with A = (rst)~ 4 , = (rsi)" 1 ^ 7 ^ + s 7 t + t 7 r) 1 / 4 . To complete the proof we need 
only to show that the curve T>ab given by the equation y 2 + y = Ax 9 + Bx 3 has 
less than 2q + 1 points. For q > 64 this is guaranteed by Lemma \l. 21 regardless of 
the fact that a is a cube or a non-cube in fc| . 

Let us discuss now the cases q < 64. By Lemma f2. 21 we still have \T>AB{k)\ < 
2q + 1 as long as w < n. To deal with the case a non-cube assume that a is the 
root of an irreducible polynomial x 3 + j for some j £ k. We have then A — j~ 1/>s , 
B = and w < n in all cases. In fact, = B ^ A 2 = j -1 / 4 for q = 16 and, since j 
is not a cube in k*, we have A g F 8 for 3 = 64 and ^4 + B = A g F 2 for q = 4. To 
deal with the case a cube assume that a is the root of an irreducible polynomial 
x 3 + jx + 1 for some j € k. We have then A = 1, B 8 = j + j 1 / 4 and w < n if q > 4; 
in fact, for q = 64 we have B 7^ (otherwise j 6 F4 and + jx + 1 would split in 
k*), and for 5 = 16 we can take j = 1 and = i? 7^ A 2 . Finally, for g = 4we have 
5 = 0, and the curve T>ab has 9 points in k; thus, Tr^ (v 3 a) = for all v £ k 3 such 
that v + v 4 a belongs to k. □ 

Case q non-square. 

Lemma 3.8. There exists j £ k such that the polynomial x 3 + x 2 + jx + (j + 1) is 
irreducible. If u £ k% is a root of this polynomial then Ti^/kiu 3 ) — 0. 

Proof. The second statement is consequence of Tv k3 / k (u) — Tr k3 / k (u 2 ) = 1. To 
show the existence of j, take any a £ fc| with Tr k3 / k (a) = 0; since q is non-square 
a is a cube, say a = u 3 , and Tr fc3 / fc (w) 7^ by ©. Multiplying u by Tr fc3 / fe (u)~ 3 
we get an element u with Tr k3 / k (u) — 1 and Tr k3 / k (u 3 ) = 0, and its minimal 
polynomial over k is x 3 + x 2 + jx + (j + 1) for some j £ k. □ 

Taking d = we attain the curve ia . In order to attain H and i? 7 we need only 
to prove the following lemma: 

Lemma 3.9. Let j £ k be such that the polynomial x 3 + x 2 + jx + (j + 1) is 
irreducible and let u £ k% be a root of this polynomial. 

If q > 2 for any e £ ¥2 there exists v £ k% such that (1 + v + w 4 )u _1 belongs to 
k and Ti k3 (v 3 + v) = e. 

If q = 2 this is true for e = 1 and false for e = 0. 

Proof. Let r, s, t £ k% be determined by u^ 1 — r 16 , = s 16 , = t 16 . 

Note that r, s, t are conjugate over fc. Take any A £ k and let x, y, z be the 
solution of u^il + x + x 4 ) = (u')^ 1 (l + y + y 4 ) = (u"y 1 (l + z + z 4 ) given in J5J of 
Lemma 12. II Clearly, x, y, z are conjugate over k; in particular, the common value 
d := u-^l + x + x 4 ) = (wTH 1 + y + y 4 ) = (m")"^ 1 + z + z 4 ) belongs to k. We 
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get all possible v £ k$ such that (1 + v + v 4 )u 1 6 fe by taking v = x for all values 
of A in fc. Moreover, by the further computation of Lemma 12. II 

Tr fc3 (z 3 +x)= Tr k (x 3 + x + y 3 + y + z 3 + z) = Tv k {AX 9 + BX 3 + CX + D), 

with A = R- 21 , B = R-^T 1 ' 4 -, C = ST 1 / 8 + R 3 S 16 , D = R 24 S 72 , where 

R = rst, S = r- 1 + s' 1 + t~\ T = r^s^ 2 + s^t' 42 + t^r' 42 . 

To complete the proof we need only to show that the curve T>abcd given by the 
equation y 2 + y = Ax 9 + Bx 3 + Cx + D has more than 1 point and less than 
2q + 1 points. This is equivalent to 2 < \T> AB c(k)\ < 2q for the curve y 2 + y = 
Ax 9 + Bx 3 + Cx, since 

pABCD{k)\ = \V ABC {k)\, or \V ABCD (k)\ + \V ABC {k)\ = 2q + 2, 

according to D belonging to AS(fc) or not. For q > 8 the desired inequality is 
guaranteed by Lemma \l. 21 

The reader can check that T 8 = j(j 2 +j + l)(j 3 +j + l)(j 6 + j 5 + j 4 +j + 1). 
For q = 8 the polynomial x 3 + x 2 + jx + j + 1 is irreducible only if j 3 + j 2 + 1 = 0; 
hence, B = R^T^ 1 / 4 ^ and 2 < \V ABC {k)\ < 2q by Lemma IO For q = 2 we 
have necessarily j = 0, A = C = D = 1, B = and the curve T> AB cd has 1 point 
in k (the point at infinity); thus, Trfe 3 (w 3 +v) = l for all values of v £ k^, such that 
(1 + v + v 4 )u~ 4 belongs to k. □ 

3.2. Quartics of quadratic type. If C is a quartic of quadratic type the ellip- 
tic curve E e is defined over k whereas E e , E e are defined over k-i and Galois 
conjugate, so that they are fc2-isogenous. 

Definition 3.10. Let (E,F) be a pair of supersingular elliptic curves defined re- 
spectively over k and k2- We say that the pair (E,F) is attained if there exists a 
plane quartic of quadratic type over k such that E e is k-isogenous to E and the 
Jacobian is k2-isogenous to E x F x F . 

Our aim in this subsection is to prove the following result 

Theorem 3.11. All pairs (E,F) of supersingular elliptic curves, E defined over 
k and F defined over ki, are attained by a plane quartic of quadratic type over k, 
with the following exceptions: 

• The pairs (Ei,E[), (E[, E\) are not attained over Fig. 

• The pairs {H,E\), (H',E[) are not attained overFg. 

• All pairs (E,F) with E Eq, E\, E[ and F Eq, E\, E[, and the 
pairs (Ei,E^ c ), (E' 1 ,E nc ), (E nc ,E[), (E' nc ,Ei) are not attained over ¥4. 

• Over ¥ 2 the attained pairs are: (Ei,E nc ), (Ei,E' nc ), (H,E' nc ), (H',E nc ). 

If we let C span all quartics of quadratic type the parameters (ag, bg, eg), 
(agi, bgi, eg/) span all triples (a, ad, ae), (a', a'd, a'e), where a' is an arbitrary ele- 
ment in &2 \ k, a — Tr fe2 / fc (a'), and d, e belong to k. 

Lemma 3.12. If the pair (E,F) is attained then the pair (E',F') is attained. 

Proof. Suppose that (E,F) is attained by a quartic with data (a',d,e). Since 
a 7^ 0, by Lemma 11.11 we can always take eo € k such that Trfc(aeo) = 1. Since 
Trfc 2 /fc(a'eo) = aeo, we have in particular Trfc 2 (a'eo) = Trfc(aeo) = 1. Thus, the 
pair {E 1 , F') is attained by a quartic with data (a' , d, e + eo) ■ □ 
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From now on, the discussion of Theorem y . 1 II takes a different form for q square 
and q non-square. 

Case q square. 
Lemma 3.13. 

a) If q > 4, among the fc 2 / 'k-traces of cubes in k%\k there are cubes and non-cubes 
of k* . If q — 4 the traces of cubes in k% \ k are always non-cubes in k* . 

b) Among the k2/k-traces of non- cubes in fc 2 \ fc there are cubes and non-cubes of 
k*. 

Proof. Take z € k\ AS(fc) and x G fc 2 \ k such that x 2 + x — z + 1. We have 
Tr fc2 / fc (x 3 ) = Tr fe2/fe (x 2 + (z + l)x) = z. 

The map E\ \ {oo} — ► {x G k \ x 3 G AS(fc)} determined by (x, y) i— ► x is onto 
and 2: 1; hence, the target set has cardinality (|Ei(fc)| — 1) /2. 

Thus, there are (q/2) + (— l) ra/ ' 2 v /g elements in A: whose cube is not in AS(fc) and 
there are (q + (— l) n / 2 2 v /g)/6 cubes in k \ AS(fc). This means that for q > 4 there 
are elements z as above being cubes and non-cubes. 

For q = 4, assume that + wx + z = is the minimal polynomial of x G \ k. 
Then, Tr k2 / k (x 3 ) = 1 + wz, and this trace is always a non-cube because zw 7^ 0. 
This proves the first item. 

There are 2(q 2 - l)/3 - 2(q - l)/3 = 2g(g - l)/3 non-cubes in fc 2 \ fc. Their 
fc2/fc-traces take at least 2{q — l)/3 different values, so that they cannot all be 
cubes. They cannot all be non-cubes either. In fact, if they were all non-cubes, 
their traces would take exactly 2(q — l)/3 different values, and the set of non-cubes 
would be closed under addition by elements of k. Therefore, the traces of all cubes 
in Jc2 \ k would all be cubes in k, in contradiction with||5j. □ 

Taking quartics of quadratic type with d = e = we attain the pairs (Ei, E nc ), 
(E nc ,Ei), (E nc ,E DC ), and the pair (Ei,Ei) if q > 4, by considering the four possi- 
bilities for a' cube/non-cube with a = Tr k2 / k (a') cube/non-cube. 

Proposition 3.14. If q> 4 and E ~/- Eq or F ~fe 2 Eq, the pair (E, F) is attained. 
If q = 4 the pairs (Eo,E nc ) and (E nc ,Eo) are attained. 

Proof. If a' is a non-cube and a = u 3 for some u G k* , we can take d G k such 
that Tr k / ri (du) ^ 0. We get b e u~ 2 = du ^ AS 2 (fc) and we attain one of the 
pairs (E ,E nc ) or (E ,E' DC ) (hence both are attained by Lemma l3.12|) . Similarly, 
if a' = (u 1 ) 3 and a is a non-cube, we attain one of the pairs (E nc ,E ) or (E' nc ,E ), 
just by taking d G k with Tr k2/¥i (du') = Tr fc/F4 (dTr A . 2/fc (u / )) ^ 0. 

From now on we suppose q > 4, a' — {u') 3 and a — u 3 . We claim that u and 
A := Tr k2 f k (u') are F4-linearly independent. In fact, if (u 1 ) 2 — Xu' + (J, is the 
minimal equation of u' over k, we see that 

a = Tr fe2/fe ((i/) 3 ) = Tr fe2/fe (A( W ') 2 + M«') = A 3 + /iA. 

Hence, u = u>\ for some w 6 FJ would imply A 3 + /iA = a = u 3 = A 3 , which 
is impossible, since Xfi ^= 0. By Lemma 11.11 we can find d G k such that w :— 
Tr fc /jr 4 (du) and w' :— Tr k2 / r4 (du') = Tr fe / F4 (dA) take prescribed values. Therefore, 
the pair (E ,E ) is attained (ww' ^ 0), one of the pairs (Eq,E\) or (E ,E[) is 
attained (w ^ 0, w' = 0) and one of the pairs (E\,Eq) or (E[,Eq) is attained 
(w = 0, w' ^ 0). □ 
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In order to finish the proof of Theorem 13.111 in the case q square, we have to 
check that the eight remaining pairs: 

(Ei,E[), (E[,Ei); (Ei,E' nc ), (E[,E nc ); 

(Enc,E[), (E' nc ,Ei); (E nc ,E' nc ), (E' ncl E nc ) 

are attained for q > 16, the last six pairs for q = 16, and only the last two pairs for 
q = 4. By Lemma fo. 121 it is sufficient to prove the following result: 

Lemma 3.15. Let a' G \ k and let a — TVfe 2 /fe(a'). 

If q > 16 there exist d, v G k, v ' G &2 such that v + v 4 a = d = v' + (v') 4 a' and 
Tr k (v 3 a) + Tr k2 ((v') 3 a') = l. 

If q = 16 this condition fails if and only if a' , a are both cubes. If q = 4 this 
condition holds if and only if a! , a are both non-cubes. 

Proof. Let r G A;, s, t G k% be determined by a = r 8 , a' = s 8 , a" — t s . Note that 
s, t are conjugate over k and r = s + 1. Take any A G fc and let n, y, z be the 
solution of x + x 4 a = y + y 4 a! = z + z 4 a" given in of Lemma 12.11 Clearly, 
x belongs to k and y, z are conjugate over k; in particular, the common value 
d := x + x 4 a — y + y 4 a' = z + z 4 a" belongs to k. We get all pairs v G fc, v' G 
such that v + v 4 a — v' + (v') 4 a' by taking v — x, v' — y for all values of A in k. By 
the further computation of Lemma l2.ll 

Tr k {x 3 a) + Tv k2 {y 3 a) = Tr k (x 3 a + y 3 a' + z 3 a") = Tr fc (AA 9 + BX 3 ), 

with A = (rst)^ 1 , B = (rst)^ 1 (r 7 s + s 7 t + < 7 r) 1 / 4 . To complete the proof we need 
only to show that the curve T>ab given by the equation y 2 + y = Ax 9 + Bx 3 has 
less than 2q + 1 points. For q > 64 this is guaranteed by Lemma \'2. 21 

By Lemma 12.21 for q < 64 the curve "Dab bas less than 2^+1 points if and 
only if w < n. We check now when the conditions on A, B ensuring that w < n 
are satisfied. The minimal equation of s, t over k is x 2 + rx + st; thus, u := r~ 2 st 
does not belong to AS(/c) (cf. Lemma ll.2(l . Let us express A, B in terms of u: 
A = (r 3 u)~\ B 4 = (ru)- 4 (u 4 + u 3 + u 2 + 1) = (rw)- 4 (u + l)(u 3 + u + 1). 

For q = 64 we have B ^ 0; in fact, -B = leads to u G F 8 C AS(/c). For 
q = 16, the condition w — n is equivalent to _B = ^4 2 ; raising to the fourth power, 
this is equivalent to u 4 (u 4 + u 3 + u 2 + 1) = r~ 5 . The eight elements of k = ¥iq 
that are not in AS(fc) are the four roots of x 4 + x 3 + 1 = and the four roots of 
x 4 + x 3 + x 2 + x + 1 = 0, both polynomials irreducible over F2. Now, if u 4 + u 3 = 1 
we have B ^ A 2 because B = A 2 implies u 6 = r~ 5 , which leads to a contradiction: 
1 = u ls = u 3 . Therefore, if u 4 + u 3 + u 2 + u = 1, the condition B = A 2 is equivalent 
to m 5 = 1 = r~ 5 , which is equivalent to u, r being both cubes in k* . It is easy to 
check that this is equivalent to a, a' being both cubes. For q = 4 the condition 
A + B e ¥2 translates into r = 1 or r = u. Hence, A + B G F2 if a is a cube 
(r = 1) or a' is a cube (st = 1, u = r~ 2 = r), and A + B ^ ¥2 if a, a' are non-cubes 
(r 7^ 1, st ^1, u = rst ^ r). □ 

Case q non-square. For (7 = 2 it is easy to check that the only attained pairs are: 

(Ei,E nc ), (Ei,E nc ), (H,E' nc ), (H',E nc ). 

From now on we assume q > 2. We can assume also that a = 1; in fact, a quartic 
with relevant data (a',d,e) has the same elliptic quotients E e , than a quartic 
with data (a'/a, ud, ae), where a = Tc k2 / k {a!) and a = u 3 . 
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Proposition 3.16. If E E\ or F ^k 2 Eq, the pair (E,F) is attained. 

Proof. We attain (E\,E\) and (Ei,E nc ) by taking d — e = and a! cube or non- 
cube respectively. By Lemma f3. 121 the pairs (Ei,E[), (Ei,E' nc ) are attained too. 

Let a' = (u 1 ) 3 be a cube with r Tik 2 /k( a ') = 1- Arguing as in Proposition 13 . 1 4l 
we see that 1 ^ A := Tr^/j-iu') and by Lemma |l. II we can find d E k such that 
to := Trfe(d) and to' := Tr^ (dti') = Trfe(dA) take prescribed values. Note that 
w' — 1 ensures in particular that Trk 2 /f 4 (du') ^ 0. Therefore, the pair [Ei : Eqj is 
attained (w = 0, w' = 1), and one of the pairs (H, Eq) or (H' , Eq) (hence both by 
Lemma l3.12|) is attained (w = w' = 1) . □ 

In order to finish the proof of Theorem 13. Ill in the case q non-square, we have 
to check that the eight remaining pairs: 

{H, Ei), (H',E[); (H,E[), (JT'.^i); 

(H,E nc ), (H',E' ac ); (H,E' nc ), (H' , E nc ) 

are attained, the first two pairs only for q > 8. By Lemma |3. 121 it is sufficient to 
prove the following result: 

Lemma 3.17. let a' E k,2 with Tr fe2 / fe (a') = 1 and let e G F2. 

If q > 8 there exist v E k, v' E &2 such that 1 + v + v 4 = v' + (V) 4 a' and 
Tr k (v 3 +v) + Tr k2 ((v / ) 3 a') = e. 

If q = 8 this is still true if a' is a non-cube or e — 1, and false otherwise. 

Proof. Let a" be the conjugate of a' over k and write a' = s 8 , a" = i 8 . Note that 
s, t are conjugate over k and s + t = 1. We can find a parametrization of the spatial 
curve 1 + x + x A = y + y A a' — z + z 4 a" as we did in Lemma 12. II 

x = 1 + {sty 1 + {sty 2 + (si)- x A + (1 + (sty 1 + (sty 2 )x 4 + { s ty 2 x 16 , 

y = s~H- 2 + s-H 2 + (st)- x A + (s-H- 2 + S -H 2 )X 4 + t- 2 s- 4 \ 16 , 

z = t-\s- 2 + t-\s 2 + (sty'X + (t-Ks- 2 + t- 4 s 2 )A 4 + s" 2 i- 4 A 16 . 

If we choose A E k we get x E k and y, z E k^ conjugate over k. Let us denote 
u '.= st\ note that u £ AS(/c) because the polynomial x 2 + x + st is irreducible over 
k. By a straightforward computation 

x 3 + x + y 3 a> + z 3 a" = u- 4 \ 36 + u- 4 X 32 + U ~ 2 A 18 + U - 2 A 16 + 

+ (1 + u- 1 + u- 2 + u- 4 )X 12 + U - 4 X 9 + (1 + u- 1 + u-' 2 + u- 4 )X s + u- 4 X 4 + u~ 4 . 

Therefore, Tr fc (a: 3 + x + y 3 a' + z 3 a") = Tr fe (AA 9 + BX 3 + CX + D), with A = u' 1 , 
B = 1 + u- 1 / 4 + u- 1 / 2 + u-\ C = 1 + u- 1 / 8 + u- 1 ' 4 + u- 1 ' 2 + u~\ D = u- 4 . 
To complete the proof we need only to show that the curve T> abcd given by the 
equation y 2 + y = Ax 9 + Bx 3 + Cx + D has more than 1 point and less than 2q + 1 
points. Arguing as in Lemma 13. 91 this is equivalent to 2 < \T>ABc(k)\ < 2q for the 
curve y 2 + y = Ax 9 + Bx 3 + Cx. For q > 8 this is guaranteed by Lemma \'2. 21 

For q = 8 this is still true if B ^ 0. Now, B 4 = u" 4 (u + l)(u 3 + u + 1), so 
that B = if and only if u = 1, or equivalently a' € F4 \ F2; in this case a', a" 
are the only cubes in ki with relative trace 1 over k. Finally, in this bad case we 
have B = 0, A = C = D = 1, the curve T>abcd has only one rational point and 
Tr fe (i; 3 + v) + Tr fea ((v') 3 a') = 1 for all possible values of v, v' . □ 
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3.3. Split quartics. 

Definition 3.18. We say that an unordered triple {E, F, G} of super singular 
curves defined over k is attained if there exists a split plane quartic over k whose 
Jacobian is k-isogenous to E x F x G . We think {E, F, G} as a multiset, allowing 
repetitions. 

The bitwists of a triple {E, F, G} are the three triples obtained by twisting exactly 
two of the curves E, F, G. 

There is no split quartic over F2; thus, we assume q > 2 throughout this subsec- 
tion. Our aim is to prove the following result 

Theorem 3.19. All triples {E, F, G} of supersingular elliptic curves over k are 
attained by a split quartic over k, with the following exceptions: 

• The triple {E\ , E±, E[} and its bitwists are not attained over ¥§4 . 

• The triple {E\, E\, E' nc } and its bitwists as well as the triples {E,F,G} 
with E, F, G £ {E\, E[, Eq} are not attained over Fig. 

• The triple {H, H, H} and its bitwists are not attained over Fg. 

• For k = F4 the only triples attained are {Eq, E nc , E nc }, {E%, E nc , E nc } 
and their bitwists. 

Given a split quartic C, the relevant data to determine the A;-isogeny classes 
of the three elliptic quotients of C are the five elements a, a', a", d, e £ k, where 
a = 09, a' = ae>, a" = a$ii. If C spans all split quartics the set {a, a', a"} spans all 
triples in k* satisfying a + a' + a" = 0. 

Lemma 3.20. If the triple {E, F, G} is attained then all its bitwists are attained. 

Proof. Suppose the Jacobian J of a quartic with parameters (a, a' , a" , d, e) sat- 
isfies J ~k E x F x G. By duality, there exists e £ k such that Trfe(aeo) = 
Trfc(a'eo) = 1 (and Trfe(a"eo) = 0). Hence, the Jacobian of the quartic with pa- 
rameters (a, a', a", d, e + cq) is fc-isogenous to E' x F' x G. □ 

From now on, the discussion of Theorem 13 . 1 91 takes a different form for q square 
and q non-square. 

Case q square. 

Lemma 3.21. Given any natural number < i < 3 there are elements x,y, z £ k* 
such that exactly i of them are cubes and x + y + z — 0, except in the following 
cases: 

If x, y, z are cubes in FJ 6 then x + y + z ^ 0. 

If x,y, z £ F| satisfy x + y + z = then necessarily two of the elements x, y, z 
are non-cubes and the third is a cube. 

Proof. By Lemma l2~3*l there are three different cubes in k* adding up to zero if and 
only if q > 16. If q > 4, there are two different cubes whose sum is a non-cube, 
because (fc*) 3 U {0} is not an additive subgroup of k (the cardinality is not a divisor 
of q). The same argument shows that for all q there are two different non-cubes 
whose sum is a cube. Finally, let NC C k* be the set of non-cubes of k*; for any 
x £ NC the set ir + NC contains 2(q— 1)/3 different elements so that it must contain 
a non-cube if q > 4. □ 
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Proposition 3.22. If q > 16 the triples {Eq, F, G} are all attained. 

If q = 16 the triple {Eq, F, G} is attained if and only if F, G don't belong both 
to {E 1 ,E' 1 ,E }. 

If q = 4 the triple {Eo, F, G} is attained if and only if F, G are both k-isogenous 
to E nc or E' nc . 

Proof. If q > 16 there is a solution in k to x 3 + y 3 + z 3 = 0, xyz ^ 0. We 
consider a quartic with parameters a — x 3 , a 1 — y 3 , a" = z 3 . We claim that the 
elements x, y, z are F4-linearly independent. In fact, any two of them are not 
F4-proportional, since y — Xx with A G F|, implies y 3 — x 3 , leading to z = 0, 
against our assumption. Also, if we had z = Xx + [iy with A, ji G F| we would have 
x 3 + y 3 — z 3 — x 3 + y 3 + XfJ,xy(Xx + /iy), leading to X[ixy(Xx + fxy) — 0, which is 
impossible. 

By duality, we can find d € k such that Tr fc /p 4 (da;), Tr fe / F4 (dy), Tr fc /jr 4 (dz) takes 
prescribed values. Hence we can choose Tr fc / F4 (dx) to be nonzero in order to achieve 
E Eq and, having in mind Lemma 13.201 we can obtain a quartic attaining any 
triple {£o, F, G} with F, G G {E 0l E x , E[}. 

If q > 4 we can attain any other triple containing Eq by the same (even easier) 
argument: we start with any solution in k of a + a 1 + a" = with a = x 3 , a" 
non-cube and a 1 cube/non-cube at will. We choose a parameter d G k such that 
dx £ AS 2 (fc) and dy belonging or not to AS 2 (A;) at will, if a' — y 3 . Finally, with 
a right choice of the parameter e we can perform two arbitrary twists on Eq, F, G 
by Lemma |3.2(JI which in practice means that we can perform arbitrary twists on 
F, G, since E' = E Q . 

For q — 4 we can do exactly the same, but restricted to the situation in which 
two exactly of a, a', a" are non-cubes, as Lemma |3.21l shows. □ 

We can attain the following triples which do not contain Eq, just by taking 
d = e = 0, and a + a' + a" = being cubes or non-cubes at will: 

{Ei, Ei, Ei}, {Ei, Ei, E DC }, {Ei, E DC , E DC }, {E nc , E nc , E DC }, 

the first triple only if q > 16, the second and fourth only if q > 4. By Lemma I3.2UI 
we can attain all their bitwists too. To finish the proof of Theorem 13 . 1 91 we need 
only to attain the triples that are obtained by applying three twists (or equivalently 
one twist) to the four triples in the above list. This will be a consequence of the 
following lemma: 

Lemma 3.23. Suppose that a, a' , a" G k* satisfy a + a' + a" = 0. There exist 
x, y, z G k such that 

(7) x + xa = y + ya=z + za 

and Trk(x 3 a + y 3 a' + z 3 a") = 1, except in the following cases: 

• q = 64 and a, a' , a" are all cubes in k* , 

• q = 16 and among a, a', a" there are two cubes and one non-cube in k* , 

• g = 4. 

Proof. Let r, s, t G k be determined by a = r 8 , a' = s 8 , a" — t s . Take any A G k 
and let x, y, z be the solution of (0 given in JU of Lemma f2. II We want to show 
the existence of A G k such that 

1 = Tr fe (iE 3 a + y 3 a + z 3 a") = Tr fc (AA 9 + BX 3 ), 
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with A = (rst)' 1 , B = (rst)- 1 (r 7 s + s 7 t + t 7 r) x l A (cf. Lemma EHJ. To complete 
the proof we need only to show that the curve T>ab given by the equation y 2 + y = 
Ax 9 + Bx 3 has less than 2q + 1 points. For q > 64 this is guaranteed by Lemma 
l2~51 

For q < 64 the condition \T>AB{k)\ < 2q + 1 is equivalent to w < n. We saw 
in the proof of Lemma [3 . 1 51 that we can express A = (r 3 ^)^ 1 , B A = (ru)~ 4 (u + 
l)(u 3 +u + l) in terms of u :— r~ 2 st, which now belongs to AS(fc). 

For q — 64 the condition w — n is equivalent to A E Fg, B = 0, which is 
equivalent to r, s, t being all cubes in k* . In fact, if A 6 Fg and B = we have 
u, r 3 6 Fg so that r 21 = 1 and r is a cube in fc*; since ^4 and B are symmetric in 
r, s, £ the other two elements s, t are cubes too. Conversely, if r, s, t are cubes, they 
are all of the form A/i, with A € F4, /i 6 F§; we can deduce from Lemma f2.3l that 
there are two possibilities up to permutation of r, s, t: either (r, s,t) — (l,oj,oj 2 )fi 
for some u> € F4 \ F2, in which case u = 1, A = /i~ 3 , or (r, s, i) = A(/Zi, A*2, with 
Mi + M2 + M3 — m ^8- m which case u = (M2/M1) 2 + (M2/M1) S AS(Fg) (hence 
m 3 + w + 1 = 0) and A = (M1M2M3) 1 - 

For (? = 16, the condition w = n is equivalent to u 4 (it 4 + u 3 + u 2 + 1) = r~ 5 . 
This is equivalent to u 4 + u + 1 = or u = r~ 5 according to r being a cube or not. 
The reader can check that this happens if and only if among a, a', a" there are two 
cubes and one non-cube. 

For q = 4 we have necessarily A = 1, B = and w = n by Lemma El □ 

Case g non-square. We recall that we are assuming q > 2. An argument completely 
analogous to that of Proposition 13 .221 shows that 

Proposition 3.24. The triples {Ei, F, G} are all attained. 

Thus, in order to finish the proof of Theorem 13 . 1 91 we have only to check that all 
triples that can be built using the curves H, H' are attained, with some exceptions 
for q = 8. Having in mind Lemma 13.201 this will be a consequence of the following 
lemma: 

Lemma 3.25. Let u, u' , u" e k* such that u 3 + (u 1 ) 3 + (u") 3 = 0, and let e e F 2 . 
If q > 8 there exist x. y, z G k such that 

(8) (1 + x + x^u- 1 = (1 + y + z/HuT 1 = (1 + z + z^u")- 1 

and Trfe(a; 3 + x + y 3 + y + z 3 + z) = e. 

If q = 8 the same is true for e = 1 and false for e — 0. 

Proof. Let r, s, t € k* be determined by u' 1 = r 16 , (u')' 1 = s 16 , = t 16 '. 

Take any A E k and let x, y, z be the solution of (JSJl given in of Lemma ITTl By 
the further computation of Lemma l2.ll 

Tr k {x 3 + x + y 3 + y + z 3 + z) = Tr fc (A\ 9 + BX 3 + CX + D), 

with A = R- 21 , B = i?- 3 T 4 / 4 , C = ST 1 /* + R 3 S 16 , D = R 24 S 72 , where 

R = rst, S = r- 1 + s' 1 + t~\ T = r" 6 ^ 42 + s" 6 *" 42 + r\- 42 . 

To complete the proof we need only to show that the curve T>abcd given by the 
equation y 2 + y = Ax 9 + Bx 3 + Cx + D has more than 1 point and less than 2q + 1 
points. For q > 8 this is guaranteed by Lemma l2~^l 
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Assume q = 8. We have A = 1, and B = because T = r~ 6 + ,s~ 6 + t~ 6 = 0. 
Note that r + s + t = because a; = a: -6 for all a; £ fc*; using this one checks easily 
that C = D = 1. Hence, the curve T>abcd has only one rational point. □ 

4. Jacobians in isogeny classes of supersingular abelian threefolds 

We want to find all possible values of the Weil polynomials of the Jacobians of 
supersingular plane quartics C defined over k, and compare the results with the 
possible values for supersingular abelian threefolds over k. Note that we do not need 
to consider hyperelliptic curves since Oort proved that there are no supersingular 
hyperelliptic curves of genus three in characteristic 2 |Oor91l §5]. 

If the quartic is split the Jacobian is fc-isogenous to E e x E 6 x E e . If the 
quartic is not split over k, the following result shows that the Weil polynomial is 
also determined by the isogeny classes of the elliptic quotients E 6 , E e , E e over 
their field of definition. 

Lemma 4.1. 

(1) If C is of cubic type then \C(k)\ = q + 1 and the Weil polynomial of the 
Jacobian is x 6 + tx 3 + q 3 , where x 2 + t + q 3 is the Frobenius polynomial of the 
elliptic quotient E over k$. 

(2) If C is of quadratic type then \C(k)\ — \E (k)\, where E e is the elliptic 
quotient of C defined over k. The Weil polynomial of the Jacobian is (x 2 + sx + 
q){x A + tx 2 + q 2 ), where x 2 + sx + q, x 2 + tx + q 2 are the respective Frobenius 
polynomial of E s jk and E e jki- 

Proof. Let C be given by ©. The polynomial R(Y) = Y 4 + fY 2 + gY determines 
an F2-linear map R: k — ► k. If R(Y) has only the root Y = in k, this linear 
map is an isomorphism and for each value X € k there is a unique value Y G k 
such that (X,Y) belongs to C(k). This shows that |C(fc)| = q+l, |C(fc 2 )| = q 2 + l, 
and these conditions imply that the Weil polynomial over k of the Jacobian J of 
C is of the type x 6 + tx 3 + q 3 for some integer t. One checks easily that the Weil 
polynomial of J over fc 3 is then (x 2 + tx + q 3 ) 3 - Since J ^fe 3 E e x E e x E e , the 
polynomial x 2 + tx + q 3 is necessarily the Frobenius polynomial of E e . This proves 
the first item. 

If R(Y) has only one nonzero root 9 in k the linear map Q : k — > k determined 
by Q(y) = y 2 + g9~ 1 y has the same image than R. In fact, these subspaces have 
both codimension one in k because Ker(i?) = {0,6*} and Ker(Q) = {O,!?^ -1 }; on 
the other hand, R(Y) = Q(Y 2 + 6Y) (since 6 2 + go- 1 = /), so that R(k) C Q(k) 
and both subspaces coincide. Therefore, for each x € k, both C and E e have two 
or zero /c-rational points having x as first coordinate, according to x 3 + dx 2 + e 
belonging or not to R(k) = Q(k). 

Let x 2 + sx + q be the Frobenius polynomial of E s jk and let J E e y. A 
for some abelian surface A. The condition |C(fc)| = \E e (k)\ implies that the Weil 
polynomial of J over k is of the type (x 2 + sx + q){x A + tx 2 + q 2 )- One checks easily 
that the Weil polynomial of A over k 2 is (x 2 + tx + q 2 ) 2 . Since J E e x E e x E 6 , 
the polynomial x 2 + tx + q 2 is necessarily the Frobenius polynomial of E e . □ 

Let us display the isogeny classes of simple supersingular abelian varieties of 
dimension 1, 2, 3. The Frobenius polynomials of the supersingular elliptic curves 
over k are given in Proposition 11.31 Let ^4( s ,t) denote the isogeny class of the 
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E e /k 3 


Weil polynomial of J 


fc-isogeny class of J 


E 


x e + q 3 


E a x A^_ q ) 


E x 


x e - 2e^fq 3 x 3 + q 3 


Ei x E nc x E nc 




x e + 2e v /r q 3 x 3 + q 3 


E[ x E' nc x E' nc 


E n ci E nc 


x 6 ± ^/<fx 3 + q 3 


fc-simple 



Table 5. Isogeny class of the Jacobian of a quartic of cubic type, 
q square, e = (— l)™/ 2 



E e /h 


Weil polynomial of J 


fc-isogeny class of J 


E x 


x e + q 3 


Ei x A (o t - g ) 


H 


x 6 - ey^q^x 3 + q 3 


H X A (-e^,q) 


H' 


x 6 + e^/2q 3 x 3 + q 3 


H ' X A (e^,q) 



Table 6. Isogeny class of the Jacobian of a quartic of cubic type, 
q non-square, e = (— l)' 71 _1 )/ 8 



E e '/k 2 


Weil polynomial of J/E 


fc-isogeny class of J 


Eq 


x 4 + q 2 


E° x A [m 


El 


x 4 — 2qx 2 + q 2 


E e x Ei x E[ 


E[ 


x 4 + 2qx 2 + q 2 


E e X E X Eq 


E nc 


x 4 + qx 2 + q 2 


E 9 x E ac x E nc 


E' nc 


x 4 — qx 2 + q 2 


E 9 x A {Qi _ q) 



Table 7. Isogeny class of the Jacobian of a quartic of quadratic 
type, q square, E 9 is the elliptic quotient defined over k 

abelian surfaces over k with Weil polynomial x 4 + sx 3 + tx 2 + qsx + q 2 . The 
fc-simple supersingular isogeny classes of abelian surfaces are MN02, Theorem 2.9]: 

-4(o,o), A (o- q ), A (^q,q), A (-Vq,i) ' if 9 is a square, and 

-4(0,-25)! 4(o, g ), A (o,- q ), A (y/^, g )> A (-V%q,q)' if g is not a square. 
Finally, it is easy to deduce from a result of Zhu jZhuOll Prop. 3.1] that there is 
no simple supersingular abelian threefold if q is nonsquare, and for q square there 
are only two isogeny classes corresponding to the polynomials x e ± y/q^x 3 + q 3 . 

Just by checking this list, Lemma 14.11 tells us when the isogeny class of the 
Jacobian of a supersingular quartic of cubic or quadratic type is simple, an elliptic 
curve times a simple surface or the product of three elliptic curves, in terms of the 
elliptic quotients of the quartic. The results are displayed in Tables 5,6,7 and 8. 
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E e '/k 2 


Weil polynomial of J/E e 


fc-isogeny class of J 




x 4 + q 2 


E e x H x H' 


Ex 


x 4 + 2qx 2 + q 2 


E e x Si x E x 


E{ 


x 4 — 2qx 2 + q 2 


E e x A ( o,_2 9 ) 


E nc 


x 4 - qx 2 + q 2 


E 9 x A (0 ,_ g) 


E' nc 


x 4 + qx 2 + q 2 


E 9 x A (0 , ? ) 



Table 8. Isogeny class of the Jacobian of a quartic of quadratic 
type, q non-square, E e is the elliptic quotient defined over k 



Theorems 13.31 13.111 and 13.191 determine the existence of supersingular quartics 
with elliptic quotients in prescribed isogeny classes. These results, thanks to Tables 
5,6,7,8, can now be reinterpreted as the determination of all polynomials that occur 
as the Weil polynomial of the Jacobian of a supersingular quartic, giving thus a 
complete picture of which isogeny classes of supersingular abelian threefolds contain 
a Jacobian. 

Theorem 4.2. All isogeny classes of simple supersingular abelian threefolds over 
k contain Jacobians. 

Theorem 4.3. Let f{x) be the Frobenius polynomial of a supersingular elliptic 
curve over k and let g(x) be the Frobenius polynomial of a supersingular k-simple 
abelian surface over k. Then, the isogeny class of abelian threefolds with Weil 
polynomial f(x)g(x) contains a Jacobian, except in the following cases (where e = 
±1 takes both values 1 and —1): 

• q is a square and g(x) = x 4 + e^/qx 3 + qx 2 + eq^/qx + q 2 , 

• q = A and f(x)g(x) is one of the following polynomials 

{x 2 +4)(x 4 + 16), {x 2 ±Ax + A)(x 4 + 16), {x 2 + 4.x + A){x 4 - Ax 2 + 16), 

• q is a non-square and f{x)g{x) is one of the following polynomials 

(x 2 + q)(x 4 + e^2qx 3 + qx 2 + eq^flqx + q 2 ), 

(x 2 + ey/2qx + q)(x 4 + e^/2q~x 3 + qx 2 + eq^/2q~x + q 2 ), 

• q = 8 and f(x)g(x) = (x 2 + 4x + 8)(x 4 - I6x 2 + 64), 

• q = 2 and g[x) — x 4 — Ax 2 + A, 

• q = 2 and f{x)g{x) is one of the following polynomials 

(x 2 + e2x + 2){x 4 - e2x 2 + 4), (x 2 + 2x + 2)(x 4 - 2a; 3 + 2a; 2 - 2x + A). 

Theorem 4.4. Let f{x) be the product of three Frobenius polynomials of supersin- 
gular elliptic curves over k. If q > 4 the isogeny class of abelian threefolds with 
Weil polynomial f(x) contains a Jacobian, except in the following cases : 

• q = 64 and f{x) = (x 2 - 16a; + 64) 3 , 
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• q = 16 and f(x) is one of the following polynomials: 

(x 2 + I6) 2 (x 2 - 8x + 16), (x 2 + 16)(x 2 ± 8x + 16) 2 , (x 2 ±8x + 16) 3 , 
(x 2 - 8x + 16)(x 2 + 8x + 16) 2 , (x 2 -4x + 16){x 2 ±8x + 16) 2 , 

• q = 8 and f(x) = (x 2 - 4x + 8) 3 . 

If q — 2 these split isogeny classes never contain Jacobians. If q — 4 the isogeny 
class of abelian threefolds with Weil polynomial f{x) contains a Jacobian if and 
only if f{x) is divisible by (x 2 + 2x + A)(x 2 — 2x + 4) or f{x) is one of the following 
polynomials: 

(x 2 + 4)(x 2 ±2x + 4) 2 , (x 2 + 4x + 4)(x 2 ±2x + 4) 2 , (x 2 + 4) 2 (x 2 + 2x + 4), 

(x 2 - 4x + 4)(x 2 + 4x + 4)(x 2 ~2x + 4). 

Corollary 4.5. If q > 64 and the k-isogeny class of super singular abelian threefolds 
with Weil polynomial f(x) contains a Jacobian, then the k-isogeny class associated 
to the polynomial f(—x) contains a Jacobian too. 

One may speculate if a similar result is valid for non-supersingular threefolds 
and/or other characteristics. 

Remark 4.6. Given an isogeny class which contains a Jacobian, it is easy to 
use the constructive methods of the proofs of Theorems 13.31 13. 1 11 13.191 to build up 
explicit supersingular quartics whose Jacobian lies in the prescribed isogeny class. 

If q is a square, a curve is maximal (respectively minimal) if and only if the 
Jacobian is /c-isogenous to E x E x E for E an elliptic curve with Frobenius poly- 
nomial x 2 + 2^/qx + q (respectively x 2 — 2^/qx + q). Therefore, Theorem 14 1 41 solves 
in particular the problem of the existence of maximal or minimal curves of genus 
three for q square. 

Corollary 4.7. Let q be a square. For q > 64, there are maximal curves and 
minimal curves of genus three over k. For q — 64 there are maximal curves over k, 
but no minimal curve. For q < 16 there are neither maximal nor minimal curves 
over k. 
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